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REMARKS/ARGUMENTS 

Claims 1-31 remain In prosecution. The first instance of claim 25 has been 
changed to claim 24 and claims 28-31 have been amended to correct for labeling 
issues. The specification has been amended to include the missing serial 
number and filing date information for the noted related applications. 

Claims 25, 28-31 were objected to because of Informalities. Claims 25 
and 28-31 have been amended per the Examiner's constructive comment As 
amended, claims 25 and 28-31 are believed to be in condition to overcome the 
noted objections. 

Claims 27-31 were rejected under 35 U.S.C. § 102(e) as being anticipated 
by Mitty et al. (U.S, Pat No. 6,199,052). Applicants respectfully traverse this 
rejection. The cited Mitty et al. (hereinafter Mitty) reference fails to teach or 
suggest steps c-e of claims 27-31, steps oe recite, "(c) instantiating an 
application process on behalf of an end entity on the computer system, the end 
entity having credentials stored in the database; (d) requesting the Key 
Repository process for the credentials of the end entity by the application 
process; and (e) if the Key Repository process authenticates the application 
process as having been pre-authorized to have the credentials, building an 
encrypted credentials file and providing the application process with the file and a 
password for the file." 

Mitty teaches an intermediary 115 that receives an encrypted outer 
envelope that includes an encrypted inner envelope having a message and a 
waybill that identifies the receiving party. The intermediary 1 15 decrypts the outer 
envelope and then forwards a new version of the encrypted outer envelope to the 
recipient The intermediary 115 archives confirmation results from the final 
recipient which helps establish that the message was received. Mitty fails to 
teach or suggest a method of obtaining cryptographic credentials by an 
application running on a computer system as claimed in claims 27-31 (see Fig. 1 
for a system view). There is no "instantiating an application process on behalf of 
an end entity on the computer system, the end entity having credentials stored in 
the database" as claimed in claims 27-31 in Mitty, nor can the receipt of an 
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encrypted outer envelope by Mftty's intermediary be construed as an application 
process as recited In the claims 27-31. Furthermore, there is no teaching of 
'requesting the Key Repository process for the credentials of the end entity by the 
application process" in Mitty. Mitty's Intermediary 115 reacts to receiving an 
encrypted message (encrypted envelope), there is also no "(c) instantiating an 
application process on behalf of an end entity on the computer system, the end 
entity having credentials stored in the database" as also recited in claims 27-31. 
As such, claims 27-31 are believed to be in condition for allowance. 

Claims 1, 3-22, 25, 26 were rejected under 35 U.S.C § 103(a) as being 
unpatentable over Ober et al (U.S. Pat. No. 6,307,936) and further in view of Mitty 
et al. Applicants agree with the Examiner's comment that the Ober reference fails 
to teach validating and recording authorizations of specific applications to access 
sensitive information in the database, wherein each of the at least one application 
is configured to query the Key Repository process for some or all of the sensitive 
information in the database and in response to the query from a particular 
instance of the at least one application, provide to the particular instance of the at 
least one application the requested some or all of the sensitive information only if 
the Key Repository process authenticates the particular instance of the at least 
one application as being pre-authorized to receive the requested some or all of 
the sensitive information. 

The cited Mitty reference however fails to teach or suggest the above 
noted limitations. There are is no application(s) in Mitty that Is "configured to 
query the Key Repository process for some or all of the sensitive information in 
the database" as claimed in claims 1 , 3-22, 25 and 26. Col. 2, lines 29-55 and 
Col. 10, lines 28-55 in Mitty, fail to provide teaching for this limitation. As 
previously mentioned, Mitty's encrypted message (encrypted envelope) is not an 
application as claimed in claims 1, 3-22, 25 and 26, therefore it is believed these 
claims are in condition for allowance. 

Claims 2, 23, 25 were rejected under 35 U.S.C. § 103(a) as being 
unpatentable over Ober and Mitty, and further in view of Price (U.S. Pat. 

130680.01/216232800 Page 1 1 Of 1 2 HP PDNO 200301738-1 



PACE 15/16 * RCVD AT 6V27f2004 3:36:41 PM [Eastern Daylight Time] * SVR:USPTO-EFXRF-1/3 * DNI3: 8729306 * CSID: 71 32388008 * DURATION (mm-ss): 06-42 



09/27/2004 14:43 FAX 7132388008 



CONLEY , ROSE 



@016 



Appl. No. 09/734,962 

Amdt. dated September 27, 2004 

Reply to Office action of June 28, 2004 

No. 6,662,299). Claims 2, 23 and 25 are also believed to be in condition for 
allowance given the comments made above regarding the Mitty reference. 

In the course of the foregoing discussions. Applicants may have at times 
referred to claim limitations in shorthand fashion, or may have focused on a 
particular claim element This discussion should not be interpreted to mean that 
the other limitations can be ignored or dismissed. The claims must be viewed as 
a whole, and each limitation of the claims must be considered when determining 
the patentability of the claims. Moreover, it should be understood that there may 
be other distinctions between the claims and the cited art which have yet to be 
raised, but which may be raised in the future. 

Applicants respectfully request reconsideration and that a timely Notice of 
Allowance be issued in this case. It is believed that no extensions of time or fees 
are required, beyond those that may otherwise be provided for in documents 
accompanying this paper. However, in the event that additional extensions of 
time are necessary to allow consideration of this paper, such extensions are 
hereby petitioned under 37 C.F.R. § 1.136(a), and any fees required (including 
fees for net addition of claims) are hereby authorized to be charged to Hewlett- 
Packard Development Company's Deposit Account No. 08-2025. ^ 



HEWLETT-PACKARD COMPANY 

Intellectual Property Administration 
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